Seguridad Apple, profile picture
Uploaded bySeguridad Apple
7,773 views

iPhone Data Protection in Depth

This document provides a comprehensive overview of iPhone data protection mechanisms, focusing on encryption and forensics challenges across various iOS versions. It discusses topics such as hardware flash memory encryption, keychain database encryption, passcode protection, and keybag architecture, while highlighting vulnerabilities and potential brute-force attack methods. The paper serves as an in-depth resource for understanding the complexities of iPhone security features and forensic implications for data recovery and protection.

Embed presentation

Downloaded 237 times
iPhone data protection in depth Jean-Baptiste B´drune e Jean Sigwald Sogeti / ESEC jean-baptiste.bedrune(at)sogeti.com jean.sigwald(at)sogeti.com
Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion Introduction Motivation • Mobile privacy is a growing concern • iPhone under scrutiny • iPhoneTracker (O’Reilly) • “Lost iPhone? Lost Passwords!” (Fraunhofer) Agenda • iOS 4 data protection • Storage encryption details • iTunes backups iPhone data protection in depth 2/59
Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion iPhone forensics Trusted boot vulnerablities • Chain of trust starting from BootROM • BootROM runs USB DFU mode to allow bootstrapping of restore ramdisk • Unsigned code execution exploits through DFU mode • Pwnage/steaks4uce/limera1n (dev team/pod2g/geohot) • All devices except iPad 2 Custom ramdisk techniques • Zdziarski method, msft guy ssh ramdisk • Modify ramdisk image from regular firmware, add sshd and command line tools • Boot (unsigned) ramdisk and kernel using DFU mode exploits • Dump system/data partition over usb (usbmux) iPhone data protection in depth 3/59
Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion iPhone crypto Embedded AES keys • UID key : unique for each device • GID key : shared by all devices of the same model • Used to decrypt IMG3 firmware images (bootloaders, kernel) • Disabled once kernel boots • IOAESAccelerator kernel extension • Requires kernel patch to use UID key from userland UID key • Encrypts static nonces at boot to generate unique device keys • key0x835 = AES(UID, "01010101010101010101010101010101") • key0x89B = AES(UID, "183e99676bb03c546fa468f51c0cbd49") • Also used for passcode derivation in iOS 4 iPhone data protection in depth 4/59
Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion iOS 3.x data protection Hardware Flash memory encryption • Introduced with iPhone 3GS • Allows fast remote wipe • Data still accessible transparently from custom ramdisk Keychain • SQLite database for passwords, certificates and private keys • Each table has an encrypted data column • All items encrypted with key 0x835 • Format : IV + AES128(key835, data + SHA1(data), iv) iPhone data protection in depth 5/59
Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion iOS 4 Data protection • Set of features to protect user data • Phone passcode used to protect master encryption keys • Challenges for iOS 4 forensics : • Keychain encryption has changed • Some protected files cannot be recovered directly from custom ramdisk • Raw data partition image cannot be read with standard tools • New encrypted iTunes backup format Our work • Keychain tools • Passcode bruteforce • Data partition encryption scheme • iTunes backup tools iPhone data protection in depth 6/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Plan 1 Introduction 2 Data protection Overview System & Escrow keybags Keychain Passcode derivation Bruteforce attack 3 Storage encryption 4 iTunes Backups 5 Conclusion iPhone data protection in depth 7/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Data protection Objectives • Protect data at rest (phone locked or powered off) • Limit impact from custom ramdisk attacks • Encrypted data protected by user’s passcode • Limit bruteforce attacks speed with custom passcode derivation function Design • Data availability • When unlocked • After first unlock • Always • Protection Classes for files and keychain items • Master keys for protection classes stored encrypted in a keybag • 3 keybag types : System, Escrow, Backup iPhone data protection in depth 8/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Data protection Protection classes Availability Filesystem Keychain When unlocked NSProtectionComplete WhenUnlocked After first unlock AfterFirstUnlock Always NSProtectionNone Always Implementation • keybagd daemon • AppleKeyStore kernel extension • MobileKeyBag private framework (IOKit user client) • AppleKeyStore clients : • Keychain • HFS content protection (filesystem) iPhone data protection in depth 9/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Data protection components & interactions Lock state notifications AppleEffaceableStorage AppleKeyStore KeyWrap/KeyUnwrap HFS content protection file keys kernel userland getLocker BAG1 KeyBagCreateWithData KeyWrap/KeyUnwrap KeyBagSetSystem keychain keys keybagd securityd systembag.kb keychain-2.db LockDevice/UnlockDevice Keychain API SpringBoard Applications F_SETPROTECTIONCLASS iPhone data protection in depth 10/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybagd Description • System daemon, loads system keybag into AppleKeyStore kernel service at boot • Handles system keybag persistance and passcode changes System keybag • Stored in /private/var/keybags/systembag.kb • Binary plist with encrypted payload • Encryption key pulled from AppleEffaceableStorage kernel service • Stored in “BAG1” effaceable locker • Tag-Length-Value payload iPhone data protection in depth 11/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybag binary format Example keybag hexdump 0000000: 4441 5441 0000 0444 5645 5253 0000 0004 DATA...DVERS.... 0000010: 0000 0002 5459 5045 0000 0004 0000 0000 ....TYPE........ 0000020: 5555 4944 0000 0010 ceea c20d cf52 40e0 UUID.........R@. 0000030: ac0e dd52 915d 38bc 484d 434b 0000 0028 ...R.]8.HMCK...( 0000040: 6785 4e94 bc50 f2e4 541b c51d 8f46 ad59 g.N..P..T....F.Y 0000050: 3af3 cdcb 201a 2e53 6424 b728 3775 788f :... ..Sd$.(7ux. 0000060: cd2e 28f8 b692 2bac 5752 4150 0000 0004 ..(...+.WRAP.... 0000070: 0000 0001 5341 4c54 0000 0014 8bda 11d7 ....SALT........ 0000080: 43bb 669c e451 646c 2ea9 ac0b 6658 ff9d C.f..Qdl....fX.. 0000090: 4954 4552 0000 0004 0000 c350 5555 4944 ITER.......PUUID 00000a0: 0000 0010 02ed b2ea c187 49b2 b9f1 7925 ..........I...y% 00000b0: ddaa daae 434c 4153 0000 0004 0000 000b ....CLAS........ 00000c0: 5752 4150 0000 0004 0000 0001 5750 4b59 WRAP........WPKY 00000d0: 0000 0020 8f81 980c a483 2ae4 e978 4cc8 ... ......*..xL. 00000e0: f715 f4e3 44ac 71cc b568 22e6 e119 6983 ....D.q..h"...i. 00000f0: b156 e25e 5555 4944 0000 0010 d8e0 f7a2 .V.^UUID........ iPhone data protection in depth 12/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybag binary format Header • VERS : 1 or 2 • Version 2 was introduced in iOS 4.3 • Minor changes in passcode derivation function • TYPE: Keybag type • 0 : System • 1 : Backup • 2 : Escrow • UUID, ITER, SALT, WRAP • HMCK : encrypted HMAC key for integrity check • SIGN = HMAC_SHA1(DATA, AES_UNWRAP(key835, HMCK)) • HMAC parameters inverted, DATA is the HMAC key (?!) iPhone data protection in depth 13/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybag binary format Wrapped class keys • UUID : Key uuid • CLAS : Class number • WRAP : Wrap flags • 1 : AES encrypted with key 0x835 • 2 : AES wrapped with passcode key (RFC 3394) • WPKY : Wrapped key iPhone data protection in depth 14/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Class keys identifiers Class keys Id Class name Wrap 1 NSProtectionComplete 3 2 (NSFileProtectionWriteOnly) 3 3 (NSFileProtectionCompleteUntilUserAuthentication) 3 4 NSProtectionNone (stored in effaceable area) x 5 unused ? (NSFileProtectionRecovery ?) 3 6 kSecAttrAccessibleWhenUnlocked 3 7 kSecAttrAccessibleAfterFirstUnlock 3 8 kSecAttrAccessibleAlways 1 9 kSecAttrAccessibleWhenUnlockedThisDeviceOnly 3 10 kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly 3 11 kSecAttrAccessibleAlwaysThisDeviceOnly 1 iPhone data protection in depth 15/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybag unlock UID key Key 0x835 Passcode Passcode KDF "1234" key Keybag SALT Keybag ITER Wrapped class WRAP = 3 (2&1) AES integrity check fail key (WPKY) unwrap => wrong passcode WRAP = 1 AES decrypt Class key iPhone data protection in depth 16/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Escrow Keybags Definition • Copy of the system keybag, protected with random 32 byte passcode • Stored off-device • Escrow keybags passcodes stored on device • /private/var/root/Library/Lockdown/escrow_records Usage • iTunes, allows backup and synchronization without entering passcode • Device must have been paired (plugged in while unlocked) once • Stored in %ALLUSERSPROFILE%AppleLockdown • Mobile Device Management • Sent to MDM server during check-in, allows remote passcode change iPhone data protection in depth 17/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keychain Description • SQLite database (keychain-2.db) • 4 tables : genp, inet, cert, keys • securityd daemon handles database access • Keychain API : IPC calls to securityd • Access control : access group from caller’s entitlements (application identifier) • WHERE agrp=... clause appended to SQL statements • On iOS 4, applications can specify a protection class (kSecAttrAccessible***) for their secrets • Each protection class has a ThisDeviceOnly variant • Secrets encrypted with unique key, wrapped by class key iPhone data protection in depth 18/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keychain Data column format System Keybag AES Wrap AES kSecAttr*** class key 0 kSecAttr*** Wrapped item key Encrypted item iPhone data protection in depth 19/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keychain Protection for build-in applications items Item Accessibility Wi-Fi passwords Always IMAP/POP/SMTP accounts AfterFirstUnlock Exchange accounts Always VPN Always LDAP/CalDAV/CardDAV accounts Always iTunes backup password WhenUnlockedThisDeviceOnly Device certificate & private key AlwaysThisDeviceOnly iPhone data protection in depth 20/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keychain Viewer Description • Graphical application for jailbroken devices • Inspect Keychain items content and attributes • Show items protection classes Implementation • Access keychain-2.db directly (read only) • Calls AppleKeyStore KeyUnwrap selector to get items keys • Requires com.apple.keystore.access-keychain-keys entitlement • Has to run as root (source code available) iPhone data protection in depth 21/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Passcode derivation Description • AppleKeyStore exposes methods to unlock keybags • UnlockDevice, KeyBagUnlock • Passcode derivation is done in kernel mode • Transforms user’s passcode into passcode key • Uses hardware UID key to tie passcode key to the device • Makes bruteforce attacks less practical • Resulting passcode key is used to unwrap class keys • If AES unwrap integrity check fails, then input passcode is wrong • Bruteforce possible with unsigned code execution, just use the AppleKeyStore interface iPhone data protection in depth 22/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Passcode derivation algorithm Initialization • A = A1 = PBKDF2(passcode, salt, iter=1, outputLength=32) Derivation (390 iterations) • XOR expand A to 4096 bytes • B = A ⊕ 1 | A ⊕ 2 | ... • Keybag V2 : B = A1 ⊕ counter++ | A1 ⊕ counter++ | . . . • AES encrypt with hardware UID key • C = AES ENCRYPT UID(B) : must be done on the target device • Last encrypted block is reused as IV for next round • XOR A with AES output • A=A⊕C iPhone data protection in depth 23/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack Using MobileKeyBag framework // load and decrypt keybag payload from systembag . kb C FDict io na ry R ef kbdict = A p p l e K e y S t o r e _ l o a d K e y B a g ( " / mnt2 / keybags " , " systembag " ); CFDataRef kbkeys = C F D i c t i o n a r y G e t V a l u e ( kbdict , CFSTR ( " KeyBagKeys " )); // load keybag blob into AppleKeyStore kernel module A p p l e K e y S t o r e K e y B a g C r e a t e W i t h D a t a ( kbkeys , & keybag_id ); A p p l e K e y S t o r e K e y B a g S e t S y s t e m ( keybag_id ); CFDataRef data = C F D a t a C r e a t e W i t h B y t e s N o C o p y (0 , passcode , 4 , NULL ); for ( i =0; i < 10000; i ++) { sprintf ( passcode , " %04 d " , i ); if (! M KB Unl oc kD evice ( data )) { printf ( " Found passcode : % s n " , passcode ); break ; } } iPhone data protection in depth 24/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack Bruteforce speed Device Time to try 10000 passcodes iPad 1 ∼16min iPhone 4 ∼20min iPhone 3GS ∼30min Implementation details • MobileKeyBag framework does not export all the required functions (AppleKeyStore***) • Easy to re-implement • No passcode set : system keybag protected with empty passcode • Passcode ”keyboard complexity” stored in configuration file • /var/mobile/Library/ConfigurationProfiles/UserSettings.plist iPhone data protection in depth 25/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack - Custom ramdisk Ramdisk creation • Extract restore ramdisk from any 4.x ipsw • Add msft guy sshd package (ssh.tar) • Add bruteforce/key extractor tools Ramdisk bootstrap • Chronic dev team syringe injection tool (DFU mode exploits) • Minimal cyanide payload patches kernel before booting • Patch IOAESAccelerator kext to allow UID key usage • Once passcode is found we can compute the passcode key from userland • Same payload and ramdisk works on all A4 devices and iPhone 3GS iPhone data protection in depth 26/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack - Ramdisk tools Custom restored daemon • Initializes usbmux, disables watchdog • Forks sshd • Small plist-based RPC server • Python scripts communicate with server over usbmux • Plist output iPhone data protection in depth 27/59
Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack - Ramdisk tools Bruteforce • Decrypt system keybag binary blob • Load in AppleKeyStore kernel extension • Try all 4-digit passcodes, if bruteforce succeeds : • Passcode, Passcode key (derivation funtion reimplemented) • Unwrapped class keys • Keychain can be decrypted offline • Protected files access through modified HFSExplorer • In-kernel keybag unlocked, protected files can also be retrieved directly using scp or sftp Escrow keybags • Get escrow keybag passcode from device • Compute passcode key • Get class keys without bruteforce iPhone data protection in depth 28/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Plan 1 Introduction 2 Data protection 3 Storage encryption Introduction Effaceable area HFS Content Protection HFSExplorer Data Wipe 4 iTunes Backups 5 Conclusion iPhone data protection in depth 29/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe iPhone storage Introduction • iPhone 3GS and below use NOR + NAND memory • Newer devices only use NAND (except iPad 1) • NAND encryption done by DMA controller (CDMA) • Software Flash Translation Layer (FTL) • Bad block management, wear levelling • Only applies to filesystem area NAND terminology • Page : read/write unit • Block : erase unit iPhone data protection in depth 30/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Filesystem encryption Algorithm • AES in CBC mode • Initialization vector depends on logical block number • Hardcoded key for system partition (f65dae950e906c42b254cc58fc78eece) • 256 bit key for data partition (EMF key) IV computation void iv_for_lbn ( unsigned long lbn , unsigned long * iv ) { for ( int i = 0; i < 4; i ++) { if ( lbn & 1) lbn = 0 x80000061 ^ ( lbn >> 1); else lbn = lbn >> 1; iv [ i ] = lbn ; } } iPhone data protection in depth 31/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Data partition encryption iOS 3 • MBR partition type 0xAE (Apple Encrypted) • EMF key stored in data partition last logical block • Encrypted with key 0x89B iOS 4 • GPT partition table, EMF GUID • EMF key stored in effaceable area • Encrypted with key 0x89B • HFS content protection iPhone data protection in depth 32/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Data partition encryption - iOS 3 Encrypted key format struct crpt_ios3 { uint32_t magic0 ; // ’ tprc ’ struct encryted_data // encrypted with key89b CBC mode zero iv { uint32_t magic1 ; // ’ TPRC ’ uint64_t p a rt i t i on _ l a s t _ l b a ; // end of data partition uint32_t unknown ; // 0 xFFFFFFFF uint8_t filesystem _key [32]; // EMF key uint32_t key_length ; // =32 uint32_t pad_zero [3]; }; }; iPhone data protection in depth 33/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe iOS 4 NAND layout Container partitions • boot : Low Level Bootloader (LLB) image • plog : Effaceable area • nvrm : nvram, contains environments variables • firm : iBoot, device tree, boot logos (IMG3 images) • fsys : Filesystem partition, mapped as /dev/disk0 16 Gb iPhone 4 NAND layout boot plog nvrm firm fsys reserved block 0 block 1 blocks 2 - 7 blocks 8 - 15 blocks 16 - 4084 blocks 4085 - 4100 • 4 banks of 4100 blocks of 128 pages of 8192 bytes data, 448 bytes spare iPhone data protection in depth 34/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe iOS 4 Storage encryption overview key 0x89B EMF key UID key key 0x835 Dkey effaceable storage (plog) BAG1 key GPT NAND key System partition Data partition systembag.kb cprotect attr System Keybag systembag.kb /dev/disk0 MKBPayload (fsys) (NSFileProtectionNone) NSFileProtectionComplete File cprotect attr class key SALT ITER File contents Passcode key (NSFileProtectionComplete) Passcode Passcode derivation function AES Wrap AES iPhone data protection in depth 35/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Effaceable area Plog partition • Stores small binary blobs (“lockers”) • Abstract AppleEffaceableStorage kernel service • Two implementations : AppleEffaceableNAND, AppleEffaceableNOR • AppleEffaceableStorage organizes storage in groups and units • For AppleEffaceableNAND, 4 groups (1 block in each bank) of 96 units (pages) iPhone data protection in depth 36/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Effaceable area 0000000: f2db b184 3521 b498 602f 242c 8acb 41df ....5!..‘/$,..A. 0000010: 97b8 d0c2 3421 b498 612f 242c 8acb 41df ....4!..a/$,..A. 0000020: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0000030: 0000 0000 0000 0000 4900 0000 2b3d e1ad ........I...+=.. 0000040: 6b4c 3400 3147 4142 3147 4142 ef3e 87cd kL4.1GAB1GAB.>.. 0000050: 374b 39ef 68a0 8977 6ac5 b229 836e 758e 7K9.h..wj..).nu. 0000060: e1b2 d8a8 f14f 7203 933f 2552 1067 3804 .....Or..?%R.g8. 0000070: 4aaf f0dc d37e 6922 a17b 863b 6b4c 2800 J....~i".{.;kL(. 0000080: 7965 6bc4 63cc 890c 046e f855 3717 0284 yek.c....n.U7... 0000090: 5bfa c670 6ed9 e42b e0d5 58a7 b021 5b91 [..pn..+..X..![. 00000a0: 16d6 9de2 8333 02af e179 4416 6b4c 2400 .....3...yD.kL$. 00000b0: 2146 4dc5 2000 0000 9506 d2b1 5d48 df7f !FM. .......]H.. 00000c0: 1fb2 ca2e 1aef cbff 8814 95f2 9e38 1ff1 .............8.. 00000d0: ad4d 4484 8f38 50a5 6b4c 0000 454e 4f44 .MD..8P.kL..ENOD Length Tags iPhone data protection in depth 37/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Plog structures Plog Unit Header • header[0:16] XOR header[16:31] = ’ecaF’ + 0x1 + 0x1 + 0x0 • generation : incremented at each write • crc32 (headers + data) Plog lockers format kL length locker tag locker data iPhone data protection in depth 38/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Effaceable lockers EMF! • Data partition encryption key, encrypted with key 0x89B • Format: length (0x20) + AES(key89B, emfkey) Dkey • NSProtectionNone class key, wrapped with key 0x835 • Format: AESWRAP(key835, Dkey) BAG1 • System keybag payload key • Format : magic (BAG1) + IV + Key • Read from userland by keybagd to decrypt systembag.kb • Erased at each passcode change to prevent attacks on previous keybag iPhone data protection in depth 39/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe AppleEffaceableStorage AppleEffaceableStorage IOKit userland interface Selector Description Comment 0 getCapacity 960 bytes 1 getBytes requires PE_i_can_has_debugger 2 setBytes requires PE_i_can_has_debugger 3 isFormatted 4 format 5 getLocker input : locker tag, output : data 6 setLocker input : locker tag, data 7 effaceLocker scalar input : locker tag 8 lockerSpace ? iPhone data protection in depth 40/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe HFS Content Protection Description • Each file data fork is encrypted with a unique file key • File key is wrapped and stored in an extended attribute • com.apple.system.cprotect • File protection set through F_SETPROTECTIONCLASS fcntl • Some headers appear in the opensource kernel • http://opensource.apple.com/source/xnu/xnu- 1504.9.37/bsd/sys/cprotect.h Protection for build-in applications files Files Accessibility Mails & attachments NSProtectionComplete Minimized applications screenshots NSProtectionComplete Everything else NSProtectionNone iPhone data protection in depth 41/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe HFS Content Protection cprotect extended attribute format struct cprot ect_xattr { uint16_t xattr_version ; // =2 ( version ?) uint16_t zero ; // =0 uint32_t unknown ; // leaks stack dword in one code path :) uint32_t p r ot e c t i o n _ c l a s s _ i d ; uint32_t wrap ped_leng th ; // 40 bytes (32 + 8 bytes from // aes wrap integrity ) uint8_t wrapped_key [1]; // wrap ped_leng th }; iPhone data protection in depth 42/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe HFSExplorer Motivation • Standard dd image of iOS 4 data partition yields unreadable files • When reading data partition from block device interface, each block is decrypted using the EMF key • Files data forks decrypted incorrectly HFSExplorer additions • Support for inline extended attributes • Reads EMF, Dkey and other class keys from plist file • Unwraps cprotect attributes to get file keys • For each block in data fork : • Encrypt with EMF key to get original ciphertext • Decrypt with file key • (HFS allocation block size == NAND page size) iPhone data protection in depth 43/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Data Wipe Trigger • Preferences → General → Reset → Erase All Content and Settings • Erase data after n invalid passcode attempts • Restore firmware • MobileMe Find My iPhone • Exchange ActiveSync • Mobile Device Managment (MDM) server iPhone data protection in depth 44/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Data Wipe Operation • mobile_obliterator daemon • Erase DKey by calling MKBDeviceObliterateClassDKey • Erase EMF key by calling selector 0x14C39 in EffacingMediaFilter service • Reformat data partition • Generate new system keybag • High level of confidence that erased data cannot be recovered iPhone data protection in depth 45/59
Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe iOS 4 Data wipe key 0x89B EMF key UID key key 0x835 Dkey effaceable storage (plog) BAG1 key GPT NAND key System partition Data partition systembag.kb cprotect attr System Keybag systembag.kb /dev/disk0 MKBPayload (fsys) (NSFileProtectionNone) NSFileProtectionComplete File cprotect attr class key SALT ITER File contents Passcode key (NSFileProtectionComplete) Passcode Passcode derivation function AES Wrap AES iPhone data protection in depth 46/59
Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Plan 1 Introduction 2 Data protection 3 Storage encryption 4 iTunes Backups Files format Keybag format Keychain format iTunes backup decrypter 5 Conclusion iPhone data protection in depth 47/59
Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Backed up files Backup storage • One directory per backup • %APPDATA%/Apple Computer/MobileSync/Backup/<udid> • Can be password protected • Each file stored in a separate file • Encrypted (AES-256 CBC) • Filenames : SHA1 hashes Database: MBDB • Custom format • Two files: Manifest.mbdb, Manifest.mbdx • Contains information to restore files correctly • Filenames, size, permissions, extended attributes, etc. iPhone data protection in depth 48/59
Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion iPhone data protection in depth 49/59
Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Database format mbdx = index • hex filenames • file information offset in mbdb mbdb = data • Sequence of MBFileRecord • Path, digest, etc. • Encryption key, different for each file • . . . and wrapped by class keys from backup keybag iPhone data protection in depth 50/59
Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Database format Number of entries Filename Manifest.mbdx 00000000 6D 62 64 78 02 00 00 00 00 9D 52 C0 3E DF C4 DA mbdx......R¿>flƒ⁄ 00000010 9E BA 39 86 84 AF B6 9B A5 03 A2 70 96 67 00 00 û∫9ÜÑØ∂õ•.¢pñg.. 00000020 1F 49 81 80 E7 53 2F 80 8C 1E 24 E4 BF 0B 06 81 .I.ÄÁS/Äå.$‰ø... 00000030 6A D4 3B 43 B7 D7 9F 50 00 00 51 4F 81 80 6C 6A j‘;C∑◊üP..QO.Älj 00000040 11 06 1D 58 46 5A E6 84 29 B2 9B 21 7D BF 14 3D ...XFZÊÑ)≤õ!}ø.= 00000050 1C D0 00 00 37 8B 81 A4 57 AB E9 71 89 04 7A 81 .–..7ã.§W´Èqâ.z. 00000060 4C C3 35 CD E2 D7 20 F6 19 67 2C 74 00 00 45 D1 L√5Õ‚◊ ˆ.g,t..E— 00000070 81 B6 2F D6 4D 8A AF FC DB E9 B0 9F CD FC 76 F4 .∂/÷Mäظ€È∞üÕ¸vÙ 00000080 0B 5C 72 7A F7 F3 00 00 07 50 41 C0 71 B4 73 93 .rz˜Û...PA¿q¥sì 00000090 F1 45 C6 D8 44 A8 E4 F8 95 15 08 5A DC D3 6D ED ÒE∆ÿD®‰¯ï..Z‹”mÌ 000000A0 00 00 00 7F 41 C0 BE DE C6 D4 2E FE 57 12 36 76 ....A¿æfi∆‘.˛W.6v Manifest.mbdb 00001F40 EE 4D D1 02 EE 00 00 00 00 00 00 00 50 04 00 00 ÓM—.Ó.......P... 00001F50 0A 48 6F 6D 65 44 6F 6D 61 69 6E 00 2F 4C 69 62 .HomeDomain./Lib 00001F60 72 61 72 79 2F 50 72 65 66 65 72 65 6E 63 65 73 rary/Preferences 00001F70 2F 63 6F 6D 2E 61 70 70 6C 65 2E 6D 6F 62 69 6C /com.apple.mobil 00001F80 65 6E 6F 74 65 73 2E 70 6C 69 73 74 FF FF 00 14 enotes.plistˇˇ.. 00001F90 15 35 D8 55 CB 3D CD 3C D7 33 2B 00 F3 6D 02 56 .5ÿUÀ=Õ<◊3+.Ûm.V 00001FA0 7C 92 MBFileRecord entry 5E 82 00 2C 04 00 00 00 A9 B2 06 84 28 45 |í^Ç.,....©≤.Ñ(E 00001FB0 94 AA 86 12 37 84 74 C1 3F 76 8A 32 97 C5 91 7D î™Ü.7Ñt¡?vä2ó≈ë} 00001FC0 54 4A 5D 6D C5 E4 98 83 86 85 28 D0 5F 8C E6 31 TJ]m≈‰òÉÜÖ(–_åÊ1 00001FD0 0D 47 81 80 00 00 00 00 00 00 59 63 00 00 01 F5 .G.Ä......Yc...ı 00001FE0 00 00 01 F5 4D D3 A1 27 4D D3 A1 27 4D D3 A1 27 ...ıM”°'M”°'M”°' 00001FF0 00 00 00 00 00 00 01 86 04 00 00 0A 48 6F 6D 65 .......Ü....Home iPhone data protection in depth 51/59
Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Backup keybag • Same format as before • Stored in Manifest.plist • BackupKeyBag section • Random class keys for each backup • Different from system keybag keys Not all the keys can be retrieved iPhone data protection in depth 52/59
Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Backup keychain • Stored in keychain-backup.plist • Same structure as keychain-2.db, but in a plist • Before accessing it: • Backup needs to be decrypted • Filenames need to be recovered • Decrypt items using keychain class keys from backup keybag iPhone data protection in depth 53/59
Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion iTunes backup decrypter Requirements • Needs password if protected • Wrote a bruteforcer (slow) Implementation • Decrypted files in a new directory • Filenames can be restored or not • MBFileRecord fully documented • Integrated keychain viewer iPhone data protection in depth 54/59
Introduction Data protection Storage encryption iTunes Backups Conclusion Plan 1 Introduction 2 Data protection 3 Storage encryption 4 iTunes Backups 5 Conclusion iPhone data protection in depth 55/59
Introduction Data protection Storage encryption iTunes Backups Conclusion Conclusion Data protection • Significant improvement over iOS 3 • Derivation algorithm uses hardware key to prevent attacks • Bruteforce attack only possible due to BootROM vulnerabilities • Only Mail files are protected by passcode • Should be adopted by other build-in apps (Photos, etc.) • Might be difficult in some cases (SMS database) Tools & Source code • http://code.google.com/p/iphone-dataprotection/ iPhone data protection in depth 56/59
Introduction Data protection Storage encryption iTunes Backups Conclusion Thank you for your attention Questions ? iPhone data protection in depth 57/59
Introduction Data protection Storage encryption iTunes Backups Conclusion References • Apple WWDC 2010, Session 209 - Securing Application Data • The iPhone wiki, http://www.theiphonewiki.com • msftguy ssh ramdisk http://msftguy.blogspot.com/ • AES wrap, RFC 3394 http://www.ietf.org/rfc/rfc3394.txt • NAND layout, CPICH http://theiphonewiki.com/wiki/index.php?title=NAND • HFSExplorer, Erik Larsson http://www.catacombae.org/hfsx.html • syringe, Chronic dev team https://github.com/Chronic-Dev/syringe • cyanide, Chronic dev team https://github.com/Chronic-Dev/cyanide • usbmux enable code, comex https://github.com/comex/bloggy/wiki/Redsn0w%2Busbmux • restored pwn, Gojohnnyboi https://github.com/Gojohnnyboi/restored_pwn iPhone data protection in depth 58/59
Introduction Data protection Storage encryption iTunes Backups Conclusion References • xpwn crypto tool, planetbeing https://github.com/planetbeing/xpwn • iPhone backup browser http://code.google.com/p/iphonebackupbrowser/ iPhone data protection in depth 59/59

More Related Content

PPTX
用Raspberry Pi 學Linux I2C Driver
by艾鍗科技
 
PDF
Remote code execution in restricted windows environments
byBorja Merino
 
PPTX
PPT on iOS
byRavi Ranjan
 
PPT
OpenEmbedded & BitBake - Denx
byyang firo
 
PPTX
Android 4.1 Jellybean OS
byBijaya Litigoner
 
PDF
computer organization and architecture
byIndrajaMeghavathula
 
PDF
Nmap
byMeztli Valeriano Orozco
 
PDF
GPD-WINや中華ノートPCなどATOM機器に 各種Linuxディストリを入れて遊ぼう Install Linux Distributions on G...
byNetwalker lab kapper
 
用Raspberry Pi 學Linux I2C Driver
by艾鍗科技
 
Remote code execution in restricted windows environments
byBorja Merino
 
PPT on iOS
byRavi Ranjan
 
OpenEmbedded & BitBake - Denx
byyang firo
 
Android 4.1 Jellybean OS
byBijaya Litigoner
 
computer organization and architecture
byIndrajaMeghavathula
 
Nmap
byMeztli Valeriano Orozco
 
GPD-WINや中華ノートPCなどATOM機器に 各種Linuxディストリを入れて遊ぼう Install Linux Distributions on G...
byNetwalker lab kapper
 

Viewers also liked

PPTX
見つけた脆弱性について(cybozu.com Security Challenge)
byMasato Kinugawa
 
PDF
Antid0te 2.0 – ASLR in iOS
bySeguridad Apple
 
PDF
iOS 6 Exploitation: 280 days later
bySeguridad Apple
 
PDF
Hacking Webkit & Its JavaScript Engines
bySencha
 
PDF
Attacking the Webkit heap [Or how to write Safari exploits]
bySeguridad Apple
 
PDF
Bug-hunter's Sorrow
byMasato Kinugawa
 
PDF
Targeting the iOS kernel
bySeguridad Apple
 
PPTX
SecurityCamp2015「CVE-2015-4483解説」
byMasato Kinugawa
 
PDF
Forensic analysis of iPhone backups (iOS 5)
bySatish b
 
PDF
X-XSS-Nightmare: 1; mode=attack ～XSSフィルターを利用したXSS攻撃～
byMasato Kinugawa
 
PPT
SenchaCon 2016: Expect the Unexpected - Dealing with Errors in Web Apps
bySencha
 
PPTX
SenchaCon 2016: Improve Workflow Driven Applications with Ext JS Draw Package...
bySencha
 
PPTX
SenchaCon 2016: JavaScript is Great but Stop Writing It - Rory Hardy
bySencha
 
PPTX
SenchaCon 2016: Handle Real-World Data with Confidence - Fredric Berling
bySencha
 
PPTX
PFSなTLS通信を復号する
by稔 小林
 
PPT
SenchaCon 2016: Add Magic to Your Ext JS Apps with D3 Visualizations - Vitaly...
bySencha
 
PDF
20160416 Azure Data Lakeのはまりどころ
by一希 大田
 
PDF
X-XSS-Nightmare: 1; mode=attack XSS Attacks Exploiting XSS Filter
byMasato Kinugawa
 
PDF
めとべや東京10 Universal Windows Platform appの新しいバインディング
by一希 大田
 
PPT
SenchaCon 2016: LinkRest - Modern RESTful API Framework for Ext JS Apps - Rou...
bySencha
 
見つけた脆弱性について(cybozu.com Security Challenge)
byMasato Kinugawa
 
Antid0te 2.0 – ASLR in iOS
bySeguridad Apple
 
iOS 6 Exploitation: 280 days later
bySeguridad Apple
 
Hacking Webkit & Its JavaScript Engines
bySencha
 
Attacking the Webkit heap [Or how to write Safari exploits]
bySeguridad Apple
 
Bug-hunter's Sorrow
byMasato Kinugawa
 
Targeting the iOS kernel
bySeguridad Apple
 
SecurityCamp2015「CVE-2015-4483解説」
byMasato Kinugawa
 
Forensic analysis of iPhone backups (iOS 5)
bySatish b
 
X-XSS-Nightmare: 1; mode=attack ～XSSフィルターを利用したXSS攻撃～
byMasato Kinugawa
 
SenchaCon 2016: Expect the Unexpected - Dealing with Errors in Web Apps
bySencha
 
SenchaCon 2016: Improve Workflow Driven Applications with Ext JS Draw Package...
bySencha
 
SenchaCon 2016: JavaScript is Great but Stop Writing It - Rory Hardy
bySencha
 
SenchaCon 2016: Handle Real-World Data with Confidence - Fredric Berling
bySencha
 
PFSなTLS通信を復号する
by稔 小林
 
SenchaCon 2016: Add Magic to Your Ext JS Apps with D3 Visualizations - Vitaly...
bySencha
 
20160416 Azure Data Lakeのはまりどころ
by一希 大田
 
X-XSS-Nightmare: 1; mode=attack XSS Attacks Exploiting XSS Filter
byMasato Kinugawa
 
めとべや東京10 Universal Windows Platform appの新しいバインディング
by一希 大田
 
SenchaCon 2016: LinkRest - Modern RESTful API Framework for Ext JS Apps - Rou...
bySencha
 

Similar to iPhone Data Protection in Depth

PDF
iOS and BlackBerry Forensics
byAndrey Belenko
 
PDF
Belenko, sklyarov dark and bright sides of i cloud (in)security
byDefconRussia
 
PDF
iOS Forensics: Overcoming iPhone Data Protection
byAndrey Belenko
 
ODP
Synapse india iphone apps presentation oncracking and analyzing apple icloud
bySynapseIndiaiPhoneApps
 
PDF
IOS Encryption Systems
byPeter Teufl
 
PDF
iOS secure app development
byDusan Klinec
 
PDF
ASFWS 2011 - Secure software development for mobile devices
byCyber Security Alliance
 
PDF
Attacking and Defending Apple iOS Devices
byTom Eston
 
PDF
iPhone forensics course overview
bySatish b
 
PDF
Behind The Code // by Exness
byMaxim Gaponov
 
PDF
iOS Application Penetation Test
byJongWon Kim
 
PPTX
Hacking and Securing iOS Applications by Satish Bomisstty
byClubHack
 
PDF
CodeMash 2.0.1.5 - Practical iOS App Attack & Defense
bySeth Law
 
PDF
Hacking and Securing iOS Applications
byn|u - The Open Security Community
 
PDF
Mobile Device Encryption Systems
byPeter Teufl
 
PDF
A (not-so-quick) Primer on iOS Encryption David Schuetz - NCC Group
byEC-Council
 
PDF
iOS Forensics: where are we now and what are we missing?
byReality Net System Solutions
 
PDF
CactusCon - Practical iOS App Attack and Defense
bySeth Law
 
PPTX
iOS Forensics
byTjylen Veselyj
 
PDF
CNIT 128 2. Analyzing iOS Applications (Part 2)
bySam Bowne
 
iOS and BlackBerry Forensics
byAndrey Belenko
 
Belenko, sklyarov dark and bright sides of i cloud (in)security
byDefconRussia
 
iOS Forensics: Overcoming iPhone Data Protection
byAndrey Belenko
 
Synapse india iphone apps presentation oncracking and analyzing apple icloud
bySynapseIndiaiPhoneApps
 
IOS Encryption Systems
byPeter Teufl
 
iOS secure app development
byDusan Klinec
 
ASFWS 2011 - Secure software development for mobile devices
byCyber Security Alliance
 
Attacking and Defending Apple iOS Devices
byTom Eston
 
iPhone forensics course overview
bySatish b
 
Behind The Code // by Exness
byMaxim Gaponov
 
iOS Application Penetation Test
byJongWon Kim
 
Hacking and Securing iOS Applications by Satish Bomisstty
byClubHack
 
CodeMash 2.0.1.5 - Practical iOS App Attack & Defense
bySeth Law
 
Hacking and Securing iOS Applications
byn|u - The Open Security Community
 
Mobile Device Encryption Systems
byPeter Teufl
 
A (not-so-quick) Primer on iOS Encryption David Schuetz - NCC Group
byEC-Council
 
iOS Forensics: where are we now and what are we missing?
byReality Net System Solutions
 
CactusCon - Practical iOS App Attack and Defense
bySeth Law
 
iOS Forensics
byTjylen Veselyj
 
CNIT 128 2. Analyzing iOS Applications (Part 2)
bySam Bowne
 

Recently uploaded

PDF
ElyriaSoftware — Powering the Future with Blockchain Innovation
byElyria Software
 
PDF
Vibe Coding vs. Spec-Driven Development [Free Meetup]
byHaim Michael
 
PDF
Unser Jahresrückblick – MarvelClient in 2025
bypanagenda
 
PPTX
Basics of Identity Access Management In mordern Infrastructure
byPrinceXavier18
 
PDF
TrustArc Webinar - Assessing AI Risk with Confidence
byTrustArc
 
PDF
eResource Scheduler Enterprise Resource Management and Scheduling Software.pdf
byeResource Scheduler
 
PDF
Security Technologys: Access Control, Firewall, VPN
byShielaLasala
 
PPTX
Combining Induction and Transduction for Abstract Reasoning.pptx
byallen578468
 
PDF
8 LLM Surveys https://tinyurl.com/bdz8e6fp
byBob Marcus
 
PPTX
The Landscape of Computer Software Development Companies
byYash Singh
 
PDF
Accelerating Responsible AI Adoption in Public Sector and Private Organizations.
byYasir Naveed Riaz
 
PDF
Decoding the DNA: The Digital Networks Act, the Open Internet, and IP interco...
byCSUC - Consorci de Serveis Universitaris de Catalunya
 
PDF
The Ultimate Guide to Problem Management Dashboards for IT Teams.pdf
byomnex systems
 
PDF
Zero Trust & Defense-in-Depth: The Future of Critical Infrastructure Security
byYasir Naveed Riaz
 
PDF
Top Cybersecurity Threats 2025 Guide by Sureshdas
byPrintersassist
 
PDF
Empowering Productivity with Clever Prompts and Intelligent Agents
byUni Systems S.M.S.A.
 
PDF
Ransomware_Resilience_Strategic_Playbook.pdf
byAfonso Henrique Rodrigues Alves
 
PDF
The major tech developments for 2026 by Pluralsight, a research and training ...
byChris Skinner
 
PDF
Generative AI in UiPath: Mastering the Generative Extractor for Intelligent D...
byDianaGray10
 
PPTX
THIS IS CYBER SECURITY NOTES USED IN CLASS ON VARIOUS TOPICS USED IN CYBERSEC...
byMelissaGblinwon
 
ElyriaSoftware — Powering the Future with Blockchain Innovation
byElyria Software
 
Vibe Coding vs. Spec-Driven Development [Free Meetup]
byHaim Michael
 
Unser Jahresrückblick – MarvelClient in 2025
bypanagenda
 
Basics of Identity Access Management In mordern Infrastructure
byPrinceXavier18
 
TrustArc Webinar - Assessing AI Risk with Confidence
byTrustArc
 
eResource Scheduler Enterprise Resource Management and Scheduling Software.pdf
byeResource Scheduler
 
Security Technologys: Access Control, Firewall, VPN
byShielaLasala
 
Combining Induction and Transduction for Abstract Reasoning.pptx
byallen578468
 
8 LLM Surveys https://tinyurl.com/bdz8e6fp
byBob Marcus
 
The Landscape of Computer Software Development Companies
byYash Singh
 
Accelerating Responsible AI Adoption in Public Sector and Private Organizations.
byYasir Naveed Riaz
 
Decoding the DNA: The Digital Networks Act, the Open Internet, and IP interco...
byCSUC - Consorci de Serveis Universitaris de Catalunya
 
The Ultimate Guide to Problem Management Dashboards for IT Teams.pdf
byomnex systems
 
Zero Trust & Defense-in-Depth: The Future of Critical Infrastructure Security
byYasir Naveed Riaz
 
Top Cybersecurity Threats 2025 Guide by Sureshdas
byPrintersassist
 
Empowering Productivity with Clever Prompts and Intelligent Agents
byUni Systems S.M.S.A.
 
Ransomware_Resilience_Strategic_Playbook.pdf
byAfonso Henrique Rodrigues Alves
 
The major tech developments for 2026 by Pluralsight, a research and training ...
byChris Skinner
 
Generative AI in UiPath: Mastering the Generative Extractor for Intelligent D...
byDianaGray10
 
THIS IS CYBER SECURITY NOTES USED IN CLASS ON VARIOUS TOPICS USED IN CYBERSEC...
byMelissaGblinwon
 

iPhone Data Protection in Depth

  • 1.
    iPhone data protectionin depth Jean-Baptiste B´drune e Jean Sigwald Sogeti / ESEC jean-baptiste.bedrune(at)sogeti.com jean.sigwald(at)sogeti.com
  • 2.
    Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion Introduction Motivation • Mobile privacy is a growing concern • iPhone under scrutiny • iPhoneTracker (O’Reilly) • “Lost iPhone? Lost Passwords!” (Fraunhofer) Agenda • iOS 4 data protection • Storage encryption details • iTunes backups iPhone data protection in depth 2/59
  • 3.
    Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion iPhone forensics Trusted boot vulnerablities • Chain of trust starting from BootROM • BootROM runs USB DFU mode to allow bootstrapping of restore ramdisk • Unsigned code execution exploits through DFU mode • Pwnage/steaks4uce/limera1n (dev team/pod2g/geohot) • All devices except iPad 2 Custom ramdisk techniques • Zdziarski method, msft guy ssh ramdisk • Modify ramdisk image from regular firmware, add sshd and command line tools • Boot (unsigned) ramdisk and kernel using DFU mode exploits • Dump system/data partition over usb (usbmux) iPhone data protection in depth 3/59
  • 4.
    Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion iPhone crypto Embedded AES keys • UID key : unique for each device • GID key : shared by all devices of the same model • Used to decrypt IMG3 firmware images (bootloaders, kernel) • Disabled once kernel boots • IOAESAccelerator kernel extension • Requires kernel patch to use UID key from userland UID key • Encrypts static nonces at boot to generate unique device keys • key0x835 = AES(UID, "01010101010101010101010101010101") • key0x89B = AES(UID, "183e99676bb03c546fa468f51c0cbd49") • Also used for passcode derivation in iOS 4 iPhone data protection in depth 4/59
  • 5.
    Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion iOS 3.x data protection Hardware Flash memory encryption • Introduced with iPhone 3GS • Allows fast remote wipe • Data still accessible transparently from custom ramdisk Keychain • SQLite database for passwords, certificates and private keys • Each table has an encrypted data column • All items encrypted with key 0x835 • Format : IV + AES128(key835, data + SHA1(data), iv) iPhone data protection in depth 5/59
  • 6.
    Introduction iPhone forensics Data protection iPhone crypto Storage encryption iOS 3.x iTunes Backups iOS 4 Conclusion iOS 4 Data protection • Set of features to protect user data • Phone passcode used to protect master encryption keys • Challenges for iOS 4 forensics : • Keychain encryption has changed • Some protected files cannot be recovered directly from custom ramdisk • Raw data partition image cannot be read with standard tools • New encrypted iTunes backup format Our work • Keychain tools • Passcode bruteforce • Data partition encryption scheme • iTunes backup tools iPhone data protection in depth 6/59
  • 7.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Plan 1 Introduction 2 Data protection Overview System & Escrow keybags Keychain Passcode derivation Bruteforce attack 3 Storage encryption 4 iTunes Backups 5 Conclusion iPhone data protection in depth 7/59
  • 8.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Data protection Objectives • Protect data at rest (phone locked or powered off) • Limit impact from custom ramdisk attacks • Encrypted data protected by user’s passcode • Limit bruteforce attacks speed with custom passcode derivation function Design • Data availability • When unlocked • After first unlock • Always • Protection Classes for files and keychain items • Master keys for protection classes stored encrypted in a keybag • 3 keybag types : System, Escrow, Backup iPhone data protection in depth 8/59
  • 9.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Data protection Protection classes Availability Filesystem Keychain When unlocked NSProtectionComplete WhenUnlocked After first unlock AfterFirstUnlock Always NSProtectionNone Always Implementation • keybagd daemon • AppleKeyStore kernel extension • MobileKeyBag private framework (IOKit user client) • AppleKeyStore clients : • Keychain • HFS content protection (filesystem) iPhone data protection in depth 9/59
  • 10.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Data protection components & interactions Lock state notifications AppleEffaceableStorage AppleKeyStore KeyWrap/KeyUnwrap HFS content protection file keys kernel userland getLocker BAG1 KeyBagCreateWithData KeyWrap/KeyUnwrap KeyBagSetSystem keychain keys keybagd securityd systembag.kb keychain-2.db LockDevice/UnlockDevice Keychain API SpringBoard Applications F_SETPROTECTIONCLASS iPhone data protection in depth 10/59
  • 11.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybagd Description • System daemon, loads system keybag into AppleKeyStore kernel service at boot • Handles system keybag persistance and passcode changes System keybag • Stored in /private/var/keybags/systembag.kb • Binary plist with encrypted payload • Encryption key pulled from AppleEffaceableStorage kernel service • Stored in “BAG1” effaceable locker • Tag-Length-Value payload iPhone data protection in depth 11/59
  • 12.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybag binary format Example keybag hexdump 0000000: 4441 5441 0000 0444 5645 5253 0000 0004 DATA...DVERS.... 0000010: 0000 0002 5459 5045 0000 0004 0000 0000 ....TYPE........ 0000020: 5555 4944 0000 0010 ceea c20d cf52 40e0 UUID.........R@. 0000030: ac0e dd52 915d 38bc 484d 434b 0000 0028 ...R.]8.HMCK...( 0000040: 6785 4e94 bc50 f2e4 541b c51d 8f46 ad59 g.N..P..T....F.Y 0000050: 3af3 cdcb 201a 2e53 6424 b728 3775 788f :... ..Sd$.(7ux. 0000060: cd2e 28f8 b692 2bac 5752 4150 0000 0004 ..(...+.WRAP.... 0000070: 0000 0001 5341 4c54 0000 0014 8bda 11d7 ....SALT........ 0000080: 43bb 669c e451 646c 2ea9 ac0b 6658 ff9d C.f..Qdl....fX.. 0000090: 4954 4552 0000 0004 0000 c350 5555 4944 ITER.......PUUID 00000a0: 0000 0010 02ed b2ea c187 49b2 b9f1 7925 ..........I...y% 00000b0: ddaa daae 434c 4153 0000 0004 0000 000b ....CLAS........ 00000c0: 5752 4150 0000 0004 0000 0001 5750 4b59 WRAP........WPKY 00000d0: 0000 0020 8f81 980c a483 2ae4 e978 4cc8 ... ......*..xL. 00000e0: f715 f4e3 44ac 71cc b568 22e6 e119 6983 ....D.q..h"...i. 00000f0: b156 e25e 5555 4944 0000 0010 d8e0 f7a2 .V.^UUID........ iPhone data protection in depth 12/59
  • 13.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybag binary format Header • VERS : 1 or 2 • Version 2 was introduced in iOS 4.3 • Minor changes in passcode derivation function • TYPE: Keybag type • 0 : System • 1 : Backup • 2 : Escrow • UUID, ITER, SALT, WRAP • HMCK : encrypted HMAC key for integrity check • SIGN = HMAC_SHA1(DATA, AES_UNWRAP(key835, HMCK)) • HMAC parameters inverted, DATA is the HMAC key (?!) iPhone data protection in depth 13/59
  • 14.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybag binary format Wrapped class keys • UUID : Key uuid • CLAS : Class number • WRAP : Wrap flags • 1 : AES encrypted with key 0x835 • 2 : AES wrapped with passcode key (RFC 3394) • WPKY : Wrapped key iPhone data protection in depth 14/59
  • 15.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Class keys identifiers Class keys Id Class name Wrap 1 NSProtectionComplete 3 2 (NSFileProtectionWriteOnly) 3 3 (NSFileProtectionCompleteUntilUserAuthentication) 3 4 NSProtectionNone (stored in effaceable area) x 5 unused ? (NSFileProtectionRecovery ?) 3 6 kSecAttrAccessibleWhenUnlocked 3 7 kSecAttrAccessibleAfterFirstUnlock 3 8 kSecAttrAccessibleAlways 1 9 kSecAttrAccessibleWhenUnlockedThisDeviceOnly 3 10 kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly 3 11 kSecAttrAccessibleAlwaysThisDeviceOnly 1 iPhone data protection in depth 15/59
  • 16.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keybag unlock UID key Key 0x835 Passcode Passcode KDF "1234" key Keybag SALT Keybag ITER Wrapped class WRAP = 3 (2&1) AES integrity check fail key (WPKY) unwrap => wrong passcode WRAP = 1 AES decrypt Class key iPhone data protection in depth 16/59
  • 17.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Escrow Keybags Definition • Copy of the system keybag, protected with random 32 byte passcode • Stored off-device • Escrow keybags passcodes stored on device • /private/var/root/Library/Lockdown/escrow_records Usage • iTunes, allows backup and synchronization without entering passcode • Device must have been paired (plugged in while unlocked) once • Stored in %ALLUSERSPROFILE%AppleLockdown • Mobile Device Management • Sent to MDM server during check-in, allows remote passcode change iPhone data protection in depth 17/59
  • 18.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keychain Description • SQLite database (keychain-2.db) • 4 tables : genp, inet, cert, keys • securityd daemon handles database access • Keychain API : IPC calls to securityd • Access control : access group from caller’s entitlements (application identifier) • WHERE agrp=... clause appended to SQL statements • On iOS 4, applications can specify a protection class (kSecAttrAccessible***) for their secrets • Each protection class has a ThisDeviceOnly variant • Secrets encrypted with unique key, wrapped by class key iPhone data protection in depth 18/59
  • 19.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keychain Data column format System Keybag AES Wrap AES kSecAttr*** class key 0 kSecAttr*** Wrapped item key Encrypted item iPhone data protection in depth 19/59
  • 20.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keychain Protection for build-in applications items Item Accessibility Wi-Fi passwords Always IMAP/POP/SMTP accounts AfterFirstUnlock Exchange accounts Always VPN Always LDAP/CalDAV/CardDAV accounts Always iTunes backup password WhenUnlockedThisDeviceOnly Device certificate & private key AlwaysThisDeviceOnly iPhone data protection in depth 20/59
  • 21.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Keychain Viewer Description • Graphical application for jailbroken devices • Inspect Keychain items content and attributes • Show items protection classes Implementation • Access keychain-2.db directly (read only) • Calls AppleKeyStore KeyUnwrap selector to get items keys • Requires com.apple.keystore.access-keychain-keys entitlement • Has to run as root (source code available) iPhone data protection in depth 21/59
  • 22.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Passcode derivation Description • AppleKeyStore exposes methods to unlock keybags • UnlockDevice, KeyBagUnlock • Passcode derivation is done in kernel mode • Transforms user’s passcode into passcode key • Uses hardware UID key to tie passcode key to the device • Makes bruteforce attacks less practical • Resulting passcode key is used to unwrap class keys • If AES unwrap integrity check fails, then input passcode is wrong • Bruteforce possible with unsigned code execution, just use the AppleKeyStore interface iPhone data protection in depth 22/59
  • 23.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Passcode derivation algorithm Initialization • A = A1 = PBKDF2(passcode, salt, iter=1, outputLength=32) Derivation (390 iterations) • XOR expand A to 4096 bytes • B = A ⊕ 1 | A ⊕ 2 | ... • Keybag V2 : B = A1 ⊕ counter++ | A1 ⊕ counter++ | . . . • AES encrypt with hardware UID key • C = AES ENCRYPT UID(B) : must be done on the target device • Last encrypted block is reused as IV for next round • XOR A with AES output • A=A⊕C iPhone data protection in depth 23/59
  • 24.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack Using MobileKeyBag framework // load and decrypt keybag payload from systembag . kb C FDict io na ry R ef kbdict = A p p l e K e y S t o r e _ l o a d K e y B a g ( " / mnt2 / keybags " , " systembag " ); CFDataRef kbkeys = C F D i c t i o n a r y G e t V a l u e ( kbdict , CFSTR ( " KeyBagKeys " )); // load keybag blob into AppleKeyStore kernel module A p p l e K e y S t o r e K e y B a g C r e a t e W i t h D a t a ( kbkeys , & keybag_id ); A p p l e K e y S t o r e K e y B a g S e t S y s t e m ( keybag_id ); CFDataRef data = C F D a t a C r e a t e W i t h B y t e s N o C o p y (0 , passcode , 4 , NULL ); for ( i =0; i < 10000; i ++) { sprintf ( passcode , " %04 d " , i ); if (! M KB Unl oc kD evice ( data )) { printf ( " Found passcode : % s n " , passcode ); break ; } } iPhone data protection in depth 24/59
  • 25.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack Bruteforce speed Device Time to try 10000 passcodes iPad 1 ∼16min iPhone 4 ∼20min iPhone 3GS ∼30min Implementation details • MobileKeyBag framework does not export all the required functions (AppleKeyStore***) • Easy to re-implement • No passcode set : system keybag protected with empty passcode • Passcode ”keyboard complexity” stored in configuration file • /var/mobile/Library/ConfigurationProfiles/UserSettings.plist iPhone data protection in depth 25/59
  • 26.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack - Custom ramdisk Ramdisk creation • Extract restore ramdisk from any 4.x ipsw • Add msft guy sshd package (ssh.tar) • Add bruteforce/key extractor tools Ramdisk bootstrap • Chronic dev team syringe injection tool (DFU mode exploits) • Minimal cyanide payload patches kernel before booting • Patch IOAESAccelerator kext to allow UID key usage • Once passcode is found we can compute the passcode key from userland • Same payload and ramdisk works on all A4 devices and iPhone 3GS iPhone data protection in depth 26/59
  • 27.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack - Ramdisk tools Custom restored daemon • Initializes usbmux, disables watchdog • Forks sshd • Small plist-based RPC server • Python scripts communicate with server over usbmux • Plist output iPhone data protection in depth 27/59
  • 28.
    Introduction Overview Data protection System & Escrow keybags Storage encryption Keychain iTunes Backups Passcode derivation Conclusion Bruteforce attack Bruteforce attack - Ramdisk tools Bruteforce • Decrypt system keybag binary blob • Load in AppleKeyStore kernel extension • Try all 4-digit passcodes, if bruteforce succeeds : • Passcode, Passcode key (derivation funtion reimplemented) • Unwrapped class keys • Keychain can be decrypted offline • Protected files access through modified HFSExplorer • In-kernel keybag unlocked, protected files can also be retrieved directly using scp or sftp Escrow keybags • Get escrow keybag passcode from device • Compute passcode key • Get class keys without bruteforce iPhone data protection in depth 28/59
  • 29.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Plan 1 Introduction 2 Data protection 3 Storage encryption Introduction Effaceable area HFS Content Protection HFSExplorer Data Wipe 4 iTunes Backups 5 Conclusion iPhone data protection in depth 29/59
  • 30.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe iPhone storage Introduction • iPhone 3GS and below use NOR + NAND memory • Newer devices only use NAND (except iPad 1) • NAND encryption done by DMA controller (CDMA) • Software Flash Translation Layer (FTL) • Bad block management, wear levelling • Only applies to filesystem area NAND terminology • Page : read/write unit • Block : erase unit iPhone data protection in depth 30/59
  • 31.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Filesystem encryption Algorithm • AES in CBC mode • Initialization vector depends on logical block number • Hardcoded key for system partition (f65dae950e906c42b254cc58fc78eece) • 256 bit key for data partition (EMF key) IV computation void iv_for_lbn ( unsigned long lbn , unsigned long * iv ) { for ( int i = 0; i < 4; i ++) { if ( lbn & 1) lbn = 0 x80000061 ^ ( lbn >> 1); else lbn = lbn >> 1; iv [ i ] = lbn ; } } iPhone data protection in depth 31/59
  • 32.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Data partition encryption iOS 3 • MBR partition type 0xAE (Apple Encrypted) • EMF key stored in data partition last logical block • Encrypted with key 0x89B iOS 4 • GPT partition table, EMF GUID • EMF key stored in effaceable area • Encrypted with key 0x89B • HFS content protection iPhone data protection in depth 32/59
  • 33.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Data partition encryption - iOS 3 Encrypted key format struct crpt_ios3 { uint32_t magic0 ; // ’ tprc ’ struct encryted_data // encrypted with key89b CBC mode zero iv { uint32_t magic1 ; // ’ TPRC ’ uint64_t p a rt i t i on _ l a s t _ l b a ; // end of data partition uint32_t unknown ; // 0 xFFFFFFFF uint8_t filesystem _key [32]; // EMF key uint32_t key_length ; // =32 uint32_t pad_zero [3]; }; }; iPhone data protection in depth 33/59
  • 34.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe iOS 4 NAND layout Container partitions • boot : Low Level Bootloader (LLB) image • plog : Effaceable area • nvrm : nvram, contains environments variables • firm : iBoot, device tree, boot logos (IMG3 images) • fsys : Filesystem partition, mapped as /dev/disk0 16 Gb iPhone 4 NAND layout boot plog nvrm firm fsys reserved block 0 block 1 blocks 2 - 7 blocks 8 - 15 blocks 16 - 4084 blocks 4085 - 4100 • 4 banks of 4100 blocks of 128 pages of 8192 bytes data, 448 bytes spare iPhone data protection in depth 34/59
  • 35.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe iOS 4 Storage encryption overview key 0x89B EMF key UID key key 0x835 Dkey effaceable storage (plog) BAG1 key GPT NAND key System partition Data partition systembag.kb cprotect attr System Keybag systembag.kb /dev/disk0 MKBPayload (fsys) (NSFileProtectionNone) NSFileProtectionComplete File cprotect attr class key SALT ITER File contents Passcode key (NSFileProtectionComplete) Passcode Passcode derivation function AES Wrap AES iPhone data protection in depth 35/59
  • 36.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Effaceable area Plog partition • Stores small binary blobs (“lockers”) • Abstract AppleEffaceableStorage kernel service • Two implementations : AppleEffaceableNAND, AppleEffaceableNOR • AppleEffaceableStorage organizes storage in groups and units • For AppleEffaceableNAND, 4 groups (1 block in each bank) of 96 units (pages) iPhone data protection in depth 36/59
  • 37.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Effaceable area 0000000: f2db b184 3521 b498 602f 242c 8acb 41df ....5!..‘/$,..A. 0000010: 97b8 d0c2 3421 b498 612f 242c 8acb 41df ....4!..a/$,..A. 0000020: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0000030: 0000 0000 0000 0000 4900 0000 2b3d e1ad ........I...+=.. 0000040: 6b4c 3400 3147 4142 3147 4142 ef3e 87cd kL4.1GAB1GAB.>.. 0000050: 374b 39ef 68a0 8977 6ac5 b229 836e 758e 7K9.h..wj..).nu. 0000060: e1b2 d8a8 f14f 7203 933f 2552 1067 3804 .....Or..?%R.g8. 0000070: 4aaf f0dc d37e 6922 a17b 863b 6b4c 2800 J....~i".{.;kL(. 0000080: 7965 6bc4 63cc 890c 046e f855 3717 0284 yek.c....n.U7... 0000090: 5bfa c670 6ed9 e42b e0d5 58a7 b021 5b91 [..pn..+..X..![. 00000a0: 16d6 9de2 8333 02af e179 4416 6b4c 2400 .....3...yD.kL$. 00000b0: 2146 4dc5 2000 0000 9506 d2b1 5d48 df7f !FM. .......]H.. 00000c0: 1fb2 ca2e 1aef cbff 8814 95f2 9e38 1ff1 .............8.. 00000d0: ad4d 4484 8f38 50a5 6b4c 0000 454e 4f44 .MD..8P.kL..ENOD Length Tags iPhone data protection in depth 37/59
  • 38.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Plog structures Plog Unit Header • header[0:16] XOR header[16:31] = ’ecaF’ + 0x1 + 0x1 + 0x0 • generation : incremented at each write • crc32 (headers + data) Plog lockers format kL length locker tag locker data iPhone data protection in depth 38/59
  • 39.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Effaceable lockers EMF! • Data partition encryption key, encrypted with key 0x89B • Format: length (0x20) + AES(key89B, emfkey) Dkey • NSProtectionNone class key, wrapped with key 0x835 • Format: AESWRAP(key835, Dkey) BAG1 • System keybag payload key • Format : magic (BAG1) + IV + Key • Read from userland by keybagd to decrypt systembag.kb • Erased at each passcode change to prevent attacks on previous keybag iPhone data protection in depth 39/59
  • 40.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe AppleEffaceableStorage AppleEffaceableStorage IOKit userland interface Selector Description Comment 0 getCapacity 960 bytes 1 getBytes requires PE_i_can_has_debugger 2 setBytes requires PE_i_can_has_debugger 3 isFormatted 4 format 5 getLocker input : locker tag, output : data 6 setLocker input : locker tag, data 7 effaceLocker scalar input : locker tag 8 lockerSpace ? iPhone data protection in depth 40/59
  • 41.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe HFS Content Protection Description • Each file data fork is encrypted with a unique file key • File key is wrapped and stored in an extended attribute • com.apple.system.cprotect • File protection set through F_SETPROTECTIONCLASS fcntl • Some headers appear in the opensource kernel • http://opensource.apple.com/source/xnu/xnu- 1504.9.37/bsd/sys/cprotect.h Protection for build-in applications files Files Accessibility Mails & attachments NSProtectionComplete Minimized applications screenshots NSProtectionComplete Everything else NSProtectionNone iPhone data protection in depth 41/59
  • 42.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe HFS Content Protection cprotect extended attribute format struct cprot ect_xattr { uint16_t xattr_version ; // =2 ( version ?) uint16_t zero ; // =0 uint32_t unknown ; // leaks stack dword in one code path :) uint32_t p r ot e c t i o n _ c l a s s _ i d ; uint32_t wrap ped_leng th ; // 40 bytes (32 + 8 bytes from // aes wrap integrity ) uint8_t wrapped_key [1]; // wrap ped_leng th }; iPhone data protection in depth 42/59
  • 43.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe HFSExplorer Motivation • Standard dd image of iOS 4 data partition yields unreadable files • When reading data partition from block device interface, each block is decrypted using the EMF key • Files data forks decrypted incorrectly HFSExplorer additions • Support for inline extended attributes • Reads EMF, Dkey and other class keys from plist file • Unwraps cprotect attributes to get file keys • For each block in data fork : • Encrypt with EMF key to get original ciphertext • Decrypt with file key • (HFS allocation block size == NAND page size) iPhone data protection in depth 43/59
  • 44.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Data Wipe Trigger • Preferences → General → Reset → Erase All Content and Settings • Erase data after n invalid passcode attempts • Restore firmware • MobileMe Find My iPhone • Exchange ActiveSync • Mobile Device Managment (MDM) server iPhone data protection in depth 44/59
  • 45.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe Data Wipe Operation • mobile_obliterator daemon • Erase DKey by calling MKBDeviceObliterateClassDKey • Erase EMF key by calling selector 0x14C39 in EffacingMediaFilter service • Reformat data partition • Generate new system keybag • High level of confidence that erased data cannot be recovered iPhone data protection in depth 45/59
  • 46.
    Introduction Introduction Data protection Effaceable area Storage encryption HFS Content Protection iTunes Backups HFSExplorer Conclusion Data Wipe iOS 4 Data wipe key 0x89B EMF key UID key key 0x835 Dkey effaceable storage (plog) BAG1 key GPT NAND key System partition Data partition systembag.kb cprotect attr System Keybag systembag.kb /dev/disk0 MKBPayload (fsys) (NSFileProtectionNone) NSFileProtectionComplete File cprotect attr class key SALT ITER File contents Passcode key (NSFileProtectionComplete) Passcode Passcode derivation function AES Wrap AES iPhone data protection in depth 46/59
  • 47.
    Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Plan 1 Introduction 2 Data protection 3 Storage encryption 4 iTunes Backups Files format Keybag format Keychain format iTunes backup decrypter 5 Conclusion iPhone data protection in depth 47/59
  • 48.
    Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Backed up files Backup storage • One directory per backup • %APPDATA%/Apple Computer/MobileSync/Backup/<udid> • Can be password protected • Each file stored in a separate file • Encrypted (AES-256 CBC) • Filenames : SHA1 hashes Database: MBDB • Custom format • Two files: Manifest.mbdb, Manifest.mbdx • Contains information to restore files correctly • Filenames, size, permissions, extended attributes, etc. iPhone data protection in depth 48/59
  • 49.
    Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion iPhone data protection in depth 49/59
  • 50.
    Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Database format mbdx = index • hex filenames • file information offset in mbdb mbdb = data • Sequence of MBFileRecord • Path, digest, etc. • Encryption key, different for each file • . . . and wrapped by class keys from backup keybag iPhone data protection in depth 50/59
  • 51.
    Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Database format Number of entries Filename Manifest.mbdx 00000000 6D 62 64 78 02 00 00 00 00 9D 52 C0 3E DF C4 DA mbdx......R¿>flƒ⁄ 00000010 9E BA 39 86 84 AF B6 9B A5 03 A2 70 96 67 00 00 û∫9ÜÑØ∂õ•.¢pñg.. 00000020 1F 49 81 80 E7 53 2F 80 8C 1E 24 E4 BF 0B 06 81 .I.ÄÁS/Äå.$‰ø... 00000030 6A D4 3B 43 B7 D7 9F 50 00 00 51 4F 81 80 6C 6A j‘;C∑◊üP..QO.Älj 00000040 11 06 1D 58 46 5A E6 84 29 B2 9B 21 7D BF 14 3D ...XFZÊÑ)≤õ!}ø.= 00000050 1C D0 00 00 37 8B 81 A4 57 AB E9 71 89 04 7A 81 .–..7ã.§W´Èqâ.z. 00000060 4C C3 35 CD E2 D7 20 F6 19 67 2C 74 00 00 45 D1 L√5Õ‚◊ ˆ.g,t..E— 00000070 81 B6 2F D6 4D 8A AF FC DB E9 B0 9F CD FC 76 F4 .∂/÷Mäظ€È∞üÕ¸vÙ 00000080 0B 5C 72 7A F7 F3 00 00 07 50 41 C0 71 B4 73 93 .rz˜Û...PA¿q¥sì 00000090 F1 45 C6 D8 44 A8 E4 F8 95 15 08 5A DC D3 6D ED ÒE∆ÿD®‰¯ï..Z‹”mÌ 000000A0 00 00 00 7F 41 C0 BE DE C6 D4 2E FE 57 12 36 76 ....A¿æfi∆‘.˛W.6v Manifest.mbdb 00001F40 EE 4D D1 02 EE 00 00 00 00 00 00 00 50 04 00 00 ÓM—.Ó.......P... 00001F50 0A 48 6F 6D 65 44 6F 6D 61 69 6E 00 2F 4C 69 62 .HomeDomain./Lib 00001F60 72 61 72 79 2F 50 72 65 66 65 72 65 6E 63 65 73 rary/Preferences 00001F70 2F 63 6F 6D 2E 61 70 70 6C 65 2E 6D 6F 62 69 6C /com.apple.mobil 00001F80 65 6E 6F 74 65 73 2E 70 6C 69 73 74 FF FF 00 14 enotes.plistˇˇ.. 00001F90 15 35 D8 55 CB 3D CD 3C D7 33 2B 00 F3 6D 02 56 .5ÿUÀ=Õ<◊3+.Ûm.V 00001FA0 7C 92 MBFileRecord entry 5E 82 00 2C 04 00 00 00 A9 B2 06 84 28 45 |í^Ç.,....©≤.Ñ(E 00001FB0 94 AA 86 12 37 84 74 C1 3F 76 8A 32 97 C5 91 7D î™Ü.7Ñt¡?vä2ó≈ë} 00001FC0 54 4A 5D 6D C5 E4 98 83 86 85 28 D0 5F 8C E6 31 TJ]m≈‰òÉÜÖ(–_åÊ1 00001FD0 0D 47 81 80 00 00 00 00 00 00 59 63 00 00 01 F5 .G.Ä......Yc...ı 00001FE0 00 00 01 F5 4D D3 A1 27 4D D3 A1 27 4D D3 A1 27 ...ıM”°'M”°'M”°' 00001FF0 00 00 00 00 00 00 01 86 04 00 00 0A 48 6F 6D 65 .......Ü....Home iPhone data protection in depth 51/59
  • 52.
    Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Backup keybag • Same format as before • Stored in Manifest.plist • BackupKeyBag section • Random class keys for each backup • Different from system keybag keys Not all the keys can be retrieved iPhone data protection in depth 52/59
  • 53.
    Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion Backup keychain • Stored in keychain-backup.plist • Same structure as keychain-2.db, but in a plist • Before accessing it: • Backup needs to be decrypted • Filenames need to be recovered • Decrypt items using keychain class keys from backup keybag iPhone data protection in depth 53/59
  • 54.
    Introduction Files format Data protection Keybag format Storage encryption Keychain format iTunes Backups iTunes backup decrypter Conclusion iTunes backup decrypter Requirements • Needs password if protected • Wrote a bruteforcer (slow) Implementation • Decrypted files in a new directory • Filenames can be restored or not • MBFileRecord fully documented • Integrated keychain viewer iPhone data protection in depth 54/59
  • 55.
    Introduction Data protection Storage encryption iTunes Backups Conclusion Plan 1 Introduction 2 Data protection 3 Storage encryption 4 iTunes Backups 5 Conclusion iPhone data protection in depth 55/59
  • 56.
    Introduction Data protection Storage encryption iTunes Backups Conclusion Conclusion Data protection • Significant improvement over iOS 3 • Derivation algorithm uses hardware key to prevent attacks • Bruteforce attack only possible due to BootROM vulnerabilities • Only Mail files are protected by passcode • Should be adopted by other build-in apps (Photos, etc.) • Might be difficult in some cases (SMS database) Tools & Source code • http://code.google.com/p/iphone-dataprotection/ iPhone data protection in depth 56/59
  • 57.
    Introduction Data protection Storage encryption iTunes Backups Conclusion Thank you for your attention Questions ? iPhone data protection in depth 57/59
  • 58.
    Introduction Data protection Storage encryption iTunes Backups Conclusion References • Apple WWDC 2010, Session 209 - Securing Application Data • The iPhone wiki, http://www.theiphonewiki.com • msftguy ssh ramdisk http://msftguy.blogspot.com/ • AES wrap, RFC 3394 http://www.ietf.org/rfc/rfc3394.txt • NAND layout, CPICH http://theiphonewiki.com/wiki/index.php?title=NAND • HFSExplorer, Erik Larsson http://www.catacombae.org/hfsx.html • syringe, Chronic dev team https://github.com/Chronic-Dev/syringe • cyanide, Chronic dev team https://github.com/Chronic-Dev/cyanide • usbmux enable code, comex https://github.com/comex/bloggy/wiki/Redsn0w%2Busbmux • restored pwn, Gojohnnyboi https://github.com/Gojohnnyboi/restored_pwn iPhone data protection in depth 58/59
  • 59.
    Introduction Data protection Storage encryption iTunes Backups Conclusion References • xpwn crypto tool, planetbeing https://github.com/planetbeing/xpwn • iPhone backup browser http://code.google.com/p/iphonebackupbrowser/ iPhone data protection in depth 59/59